Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2d3d7a51eb...cs.exe

windows7-x64

10

2d3d7a51eb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d3d7a51eb5a6cb238d76183c18d5c40_NeikiAnalytics.exe

  • Size

    80KB

  • Sample

    240529-cpzvlaee8z

  • MD5

    2d3d7a51eb5a6cb238d76183c18d5c40

  • SHA1

    d16b88cca159c991a52c04a3a684e203934d5313

  • SHA256

    6b22f49e1bd181464458a442851b35b439839ac1ae42bfeda7d893fef4b12ab4

  • SHA512

    ad064bd80cec86b58441db12e70ac67ffcf1c6bfc6cf068740ad0486cac333f5c5417921f576245b333a34a0f6ff4f77582bc0c1840534368ed6fbcb35fa92b5

  • SSDEEP

    1536:jwUrjcm45pzOt8CdQdI6NdZOhNoZLfA2LtHwfi+TjRC/6i:jHc9p4iIUdZO/oZx9wf1TjYL

Score
10/10
persistence

Malware Config

Targets

    • Target

      2d3d7a51eb5a6cb238d76183c18d5c40_NeikiAnalytics.exe

    • Size

      80KB

    • MD5

      2d3d7a51eb5a6cb238d76183c18d5c40

    • SHA1

      d16b88cca159c991a52c04a3a684e203934d5313

    • SHA256

      6b22f49e1bd181464458a442851b35b439839ac1ae42bfeda7d893fef4b12ab4

    • SHA512

      ad064bd80cec86b58441db12e70ac67ffcf1c6bfc6cf068740ad0486cac333f5c5417921f576245b333a34a0f6ff4f77582bc0c1840534368ed6fbcb35fa92b5

    • SSDEEP

      1536:jwUrjcm45pzOt8CdQdI6NdZOhNoZLfA2LtHwfi+TjRC/6i:jHc9p4iIUdZO/oZx9wf1TjYL

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks